@crylabsorg/suward-sdk 0.0.20

package/dist/cjs/core/webhooks/verifyAsymmetricSignature.d.ts

@@ -0,0 +1,10 @@
+import type { SignatureEncoding } from "./types.js";
+export type AsymmetricAlgorithm = "RSA_SHA256" | "RSA_SHA384" | "RSA_SHA512" | "ECDSA_SHA256" | "ECDSA_SHA384" | "ECDSA_SHA512" | "ED25519";
+export interface VerifyAsymmetricSignatureArgs {
+    payload: string;
+    signature: string;
+    publicKey: string;
+    algorithm: AsymmetricAlgorithm;
+    encoding: SignatureEncoding;
+}
+export declare function verifyAsymmetricSignature(args: VerifyAsymmetricSignatureArgs): Promise<boolean>;

package/dist/cjs/core/webhooks/verifyAsymmetricSignature.js

@@ -0,0 +1,210 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.verifyAsymmetricSignature = verifyAsymmetricSignature;
+const index_js_1 = require("../runtime/index.js");
+function getNodeAlgorithmName(algorithm) {
+    switch (algorithm) {
+        case "RSA_SHA256":
+            return "RSA-SHA256";
+        case "RSA_SHA384":
+            return "RSA-SHA384";
+        case "RSA_SHA512":
+            return "RSA-SHA512";
+        case "ECDSA_SHA256":
+            return "SHA256";
+        case "ECDSA_SHA384":
+            return "SHA384";
+        case "ECDSA_SHA512":
+            return "SHA512";
+    }
+}
+// Each ECDSA curve has a fixed coordinate size for IEEE P1363 format.
+// Web Crypto requires P1363 (r ∥ s), while Node's createVerify accepts DER (ASN.1 SEQUENCE).
+function ecdsaCoordSize(algorithm) {
+    switch (algorithm) {
+        case "ECDSA_SHA256":
+            return 32; // P-256
+        case "ECDSA_SHA384":
+            return 48; // P-384
+        case "ECDSA_SHA512":
+            return 66; // P-521
+    }
+}
+// Read a DER length field starting at der[offset]. Returns [length, bytesConsumed].
+// Handles both short form (1 byte) and long form (0x81/0x82 prefix).
+function readDerLength(der, offset) {
+    const first = der[offset];
+    if (first < 0x80) {
+        return [first, 1];
+    }
+    const numLenBytes = first & 0x7f;
+    let length = 0;
+    for (let i = 0; i < numLenBytes; i++) {
+        length = (length << 8) | der[offset + 1 + i];
+    }
+    return [length, 1 + numLenBytes];
+}
+// Convert a DER-encoded ECDSA signature (ASN.1 SEQUENCE { INTEGER r, INTEGER s })
+// to IEEE P1363 format (r ∥ s, each zero-padded to coordSize bytes).
+function derToP1363(der, coordSize) {
+    // DER structure: 0x30 <len> 0x02 <rLen> <r> 0x02 <sLen> <s>
+    // Skip the outer SEQUENCE tag (0x30) and its length (may be long-form for P-521).
+    let offset = 1; // skip 0x30
+    const [, seqLenBytes] = readDerLength(der, offset);
+    offset += seqLenBytes;
+    if (der[offset] !== 0x02) {
+        throw new Error("Invalid DER signature: expected INTEGER tag for r");
+    }
+    offset++; // skip 0x02 tag
+    const [rLen, rLenBytes] = readDerLength(der, offset);
+    offset += rLenBytes;
+    const r = der.slice(offset, offset + rLen);
+    offset += rLen;
+    if (der[offset] !== 0x02) {
+        throw new Error("Invalid DER signature: expected INTEGER tag for s");
+    }
+    offset++; // skip 0x02 tag
+    const [sLen, sLenBytes] = readDerLength(der, offset);
+    offset += sLenBytes;
+    const s = der.slice(offset, offset + sLen);
+    const result = new Uint8Array(new ArrayBuffer(coordSize * 2));
+    // r and s may have a leading 0x00 padding byte (DER positive integer) — strip it,
+    // then right-align into the fixed-size output.
+    const rStripped = r[0] === 0x00 ? r.slice(1) : r;
+    const sStripped = s[0] === 0x00 ? s.slice(1) : s;
+    result.set(rStripped, coordSize - rStripped.length);
+    result.set(sStripped, coordSize * 2 - sStripped.length);
+    return result;
+}
+function pemToBytes(pem) {
+    const lines = pem.replace(/-----[A-Z ]+-----/g, "").replace(/\s+/g, "");
+    const binary = atob(lines);
+    const bytes = new Uint8Array(new ArrayBuffer(binary.length));
+    for (let i = 0; i < binary.length; i++) {
+        bytes[i] = binary.charCodeAt(i);
+    }
+    return bytes;
+}
+function signatureToBytes(signature, encoding) {
+    if (encoding === "base64") {
+        const binary = atob(signature);
+        const bytes = new Uint8Array(new ArrayBuffer(binary.length));
+        for (let i = 0; i < binary.length; i++) {
+            bytes[i] = binary.charCodeAt(i);
+        }
+        return bytes;
+    }
+    // hex
+    const bytes = new Uint8Array(new ArrayBuffer(signature.length / 2));
+    for (let i = 0; i < bytes.length; i++) {
+        bytes[i] = parseInt(signature.slice(i * 2, i * 2 + 2), 16);
+    }
+    return bytes;
+}
+function getSubtleAlgorithms(algorithm) {
+    switch (algorithm) {
+        case "RSA_SHA256":
+            return {
+                importAlgorithm: { name: "RSASSA-PKCS1-v1_5", hash: "SHA-256" },
+                verifyAlgorithm: { name: "RSASSA-PKCS1-v1_5" },
+            };
+        case "RSA_SHA384":
+            return {
+                importAlgorithm: { name: "RSASSA-PKCS1-v1_5", hash: "SHA-384" },
+                verifyAlgorithm: { name: "RSASSA-PKCS1-v1_5" },
+            };
+        case "RSA_SHA512":
+            return {
+                importAlgorithm: { name: "RSASSA-PKCS1-v1_5", hash: "SHA-512" },
+                verifyAlgorithm: { name: "RSASSA-PKCS1-v1_5" },
+            };
+        case "ECDSA_SHA256":
+            return {
+                importAlgorithm: { name: "ECDSA", namedCurve: "P-256" },
+                verifyAlgorithm: { name: "ECDSA", hash: "SHA-256" },
+            };
+        case "ECDSA_SHA384":
+            return {
+                importAlgorithm: { name: "ECDSA", namedCurve: "P-384" },
+                verifyAlgorithm: { name: "ECDSA", hash: "SHA-384" },
+            };
+        case "ECDSA_SHA512":
+            return {
+                importAlgorithm: { name: "ECDSA", namedCurve: "P-521" },
+                verifyAlgorithm: { name: "ECDSA", hash: "SHA-512" },
+            };
+        case "ED25519":
+            return {
+                importAlgorithm: { name: "Ed25519" },
+                verifyAlgorithm: { name: "Ed25519" },
+            };
+    }
+}
+function verifyAsymmetricSignature(args) {
+    return __awaiter(this, void 0, void 0, function* () {
+        if (index_js_1.RUNTIME.type === "node") {
+            const crypto = yield Promise.resolve().then(() => __importStar(require("crypto")));
+            if (args.algorithm === "ED25519") {
+                const signatureBytes = Uint8Array.from(Buffer.from(args.signature, args.encoding));
+                return crypto.verify(null, Uint8Array.from(Buffer.from(args.payload)), args.publicKey, signatureBytes);
+            }
+            const verifier = crypto.createVerify(getNodeAlgorithmName(args.algorithm));
+            verifier.update(args.payload);
+            return verifier.verify(args.publicKey, args.signature, args.encoding);
+        }
+        const subtle = globalThis.crypto.subtle;
+        const { importAlgorithm, verifyAlgorithm } = getSubtleAlgorithms(args.algorithm);
+        const keyBytes = pemToBytes(args.publicKey);
+        const key = yield subtle.importKey("spki", keyBytes, importAlgorithm, false, ["verify"]);
+        let signatureBytes = signatureToBytes(args.signature, args.encoding);
+        // Web Crypto requires IEEE P1363 format for ECDSA (raw r ∥ s), but the
+        // incoming signature is DER-encoded (the format Node and most libraries produce).
+        if (args.algorithm === "ECDSA_SHA256" || args.algorithm === "ECDSA_SHA384" || args.algorithm === "ECDSA_SHA512") {
+            signatureBytes = derToP1363(signatureBytes, ecdsaCoordSize(args.algorithm));
+        }
+        const payloadBytes = new TextEncoder().encode(args.payload);
+        return subtle.verify(verifyAlgorithm, key, signatureBytes, payloadBytes);
+    });
+}

package/dist/cjs/environments.d.ts

@@ -0,0 +1,4 @@
+export declare const SuwardSDKEnvironment: {
+    readonly Default: "https://api.suward.com";
+};
+export type SuwardSDKEnvironment = typeof SuwardSDKEnvironment.Default;

package/dist/cjs/environments.js

@@ -0,0 +1,7 @@
+"use strict";
+// This file was auto-generated by Fern from our API Definition.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SuwardSDKEnvironment = void 0;
+exports.SuwardSDKEnvironment = {
+    Default: "https://api.suward.com",
+};

package/dist/cjs/errors/SuwardSDKError.d.ts

@@ -0,0 +1,14 @@
+import type * as core from "../core/index.js";
+export declare class SuwardSDKError extends Error {
+    readonly statusCode?: number;
+    readonly body?: unknown;
+    readonly rawResponse?: core.RawResponse;
+    readonly cause?: unknown;
+    constructor({ message, statusCode, body, rawResponse, cause, }: {
+        message?: string;
+        statusCode?: number;
+        body?: unknown;
+        rawResponse?: core.RawResponse;
+        cause?: unknown;
+    });
+}

package/dist/cjs/errors/SuwardSDKError.js

@@ -0,0 +1,35 @@
+"use strict";
+// This file was auto-generated by Fern from our API Definition.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SuwardSDKError = void 0;
+const json_js_1 = require("../core/json.js");
+class SuwardSDKError extends Error {
+    constructor({ message, statusCode, body, rawResponse, cause, }) {
+        super(buildMessage({ message, statusCode, body }));
+        Object.setPrototypeOf(this, new.target.prototype);
+        if (Error.captureStackTrace) {
+            Error.captureStackTrace(this, this.constructor);
+        }
+        this.name = "SuwardSDKError";
+        this.statusCode = statusCode;
+        this.body = body;
+        this.rawResponse = rawResponse;
+        if (cause != null) {
+            this.cause = cause;
+        }
+    }
+}
+exports.SuwardSDKError = SuwardSDKError;
+function buildMessage({ message, statusCode, body, }) {
+    const lines = [];
+    if (message != null) {
+        lines.push(message);
+    }
+    if (statusCode != null) {
+        lines.push(`Status code: ${statusCode.toString()}`);
+    }
+    if (body != null) {
+        lines.push(`Body: ${(0, json_js_1.toJson)(body, undefined, 2)}`);
+    }
+    return lines.join("\n");
+}

package/dist/cjs/errors/SuwardSDKTimeoutError.d.ts

@@ -0,0 +1,6 @@
+export declare class SuwardSDKTimeoutError extends Error {
+    readonly cause?: unknown;
+    constructor(message: string, opts?: {
+        cause?: unknown;
+    });
+}

package/dist/cjs/errors/SuwardSDKTimeoutError.js

@@ -0,0 +1,18 @@
+"use strict";
+// This file was auto-generated by Fern from our API Definition.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SuwardSDKTimeoutError = void 0;
+class SuwardSDKTimeoutError extends Error {
+    constructor(message, opts) {
+        super(message);
+        Object.setPrototypeOf(this, new.target.prototype);
+        if (Error.captureStackTrace) {
+            Error.captureStackTrace(this, this.constructor);
+        }
+        this.name = "SuwardSDKTimeoutError";
+        if ((opts === null || opts === void 0 ? void 0 : opts.cause) != null) {
+            this.cause = opts.cause;
+        }
+    }
+}
+exports.SuwardSDKTimeoutError = SuwardSDKTimeoutError;

package/dist/cjs/errors/handleNonStatusCodeError.d.ts

@@ -0,0 +1,2 @@
+import type * as core from "../core/index.js";
+export declare function handleNonStatusCodeError(error: core.Fetcher.Error, rawResponse: core.RawResponse, method: string, path: string): never;

package/dist/cjs/errors/handleNonStatusCodeError.js

@@ -0,0 +1,68 @@
+"use strict";
+// This file was auto-generated by Fern from our API Definition.
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handleNonStatusCodeError = handleNonStatusCodeError;
+const errors = __importStar(require("./index.js"));
+function handleNonStatusCodeError(error, rawResponse, method, path) {
+    switch (error.reason) {
+        case "non-json":
+            throw new errors.SuwardSDKError({
+                statusCode: error.statusCode,
+                body: error.rawBody,
+                rawResponse: rawResponse,
+            });
+        case "body-is-null":
+            throw new errors.SuwardSDKError({
+                statusCode: error.statusCode,
+                rawResponse: rawResponse,
+            });
+        case "timeout":
+            throw new errors.SuwardSDKTimeoutError(`Timeout exceeded when calling ${method} ${path}.`, {
+                cause: error.cause,
+            });
+        case "unknown":
+            throw new errors.SuwardSDKError({
+                message: error.errorMessage,
+                rawResponse: rawResponse,
+                cause: error.cause,
+            });
+        default:
+            throw new errors.SuwardSDKError({
+                message: "Unknown error",
+                rawResponse: rawResponse,
+            });
+    }
+}

package/dist/cjs/errors/index.d.ts

@@ -0,0 +1,2 @@
+export { SuwardSDKError } from "./SuwardSDKError.js";
+export { SuwardSDKTimeoutError } from "./SuwardSDKTimeoutError.js";

package/dist/cjs/errors/index.js

@@ -0,0 +1,7 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SuwardSDKTimeoutError = exports.SuwardSDKError = void 0;
+var SuwardSDKError_js_1 = require("./SuwardSDKError.js");
+Object.defineProperty(exports, "SuwardSDKError", { enumerable: true, get: function () { return SuwardSDKError_js_1.SuwardSDKError; } });
+var SuwardSDKTimeoutError_js_1 = require("./SuwardSDKTimeoutError.js");
+Object.defineProperty(exports, "SuwardSDKTimeoutError", { enumerable: true, get: function () { return SuwardSDKTimeoutError_js_1.SuwardSDKTimeoutError; } });

package/dist/cjs/exports.d.ts

@@ -0,0 +1 @@
+export * from "./core/exports.js";

package/dist/cjs/exports.js

@@ -0,0 +1,17 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./core/exports.js"), exports);

package/dist/cjs/index.d.ts

@@ -0,0 +1,7 @@
+export * as SuwardSDK from "./api/index.js";
+export type { BaseClientOptions, BaseRequestOptions } from "./BaseClient.js";
+export { SuwardSDKClient } from "./Client.js";
+export { SuwardSDKEnvironment } from "./environments.js";
+export { SuwardSDKError, SuwardSDKTimeoutError } from "./errors/index.js";
+export * from "./exports.js";
+export * as webhooks from "./webhooks/index.js";

package/dist/cjs/index.js

@@ -0,0 +1,49 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.webhooks = exports.SuwardSDKTimeoutError = exports.SuwardSDKError = exports.SuwardSDKEnvironment = exports.SuwardSDKClient = exports.SuwardSDK = void 0;
+exports.SuwardSDK = __importStar(require("./api/index.js"));
+var Client_js_1 = require("./Client.js");
+Object.defineProperty(exports, "SuwardSDKClient", { enumerable: true, get: function () { return Client_js_1.SuwardSDKClient; } });
+var environments_js_1 = require("./environments.js");
+Object.defineProperty(exports, "SuwardSDKEnvironment", { enumerable: true, get: function () { return environments_js_1.SuwardSDKEnvironment; } });
+var index_js_1 = require("./errors/index.js");
+Object.defineProperty(exports, "SuwardSDKError", { enumerable: true, get: function () { return index_js_1.SuwardSDKError; } });
+Object.defineProperty(exports, "SuwardSDKTimeoutError", { enumerable: true, get: function () { return index_js_1.SuwardSDKTimeoutError; } });
+__exportStar(require("./exports.js"), exports);
+exports.webhooks = __importStar(require("./webhooks/index.js"));

package/dist/cjs/version.d.ts

@@ -0,0 +1 @@
+export declare const SDK_VERSION = "0.0.20";

package/dist/cjs/version.js

@@ -0,0 +1,4 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SDK_VERSION = void 0;
+exports.SDK_VERSION = "0.0.20";

package/dist/cjs/webhooks/WebhooksHelper.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Verify an asymmetric webhook signature.
+ *
+ * Extract the signature from the "X-Suward-Signature" header and pass it as the signatureHeader parameter.
+ * Extract the timestamp from the "X-Suward-Timestamp" header and pass it as the timestampHeader parameter.
+ */
+export declare class WebhooksHelper {
+    static verifySignature(requestBody: string, signatureHeader: string, publicKey: string, timestampHeader: string): Promise<boolean>;
+}

package/dist/cjs/webhooks/WebhooksHelper.js

@@ -0,0 +1,87 @@
+"use strict";
+// This file was auto-generated by Fern from our API Definition.
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WebhooksHelper = void 0;
+const core = __importStar(require("../core/index.js"));
+const TIMESTAMP_TOLERANCE_SECONDS = 300;
+const SIGNATURE_PREFIX = "ed25519=";
+/**
+ * Verify an asymmetric webhook signature.
+ *
+ * Extract the signature from the "X-Suward-Signature" header and pass it as the signatureHeader parameter.
+ * Extract the timestamp from the "X-Suward-Timestamp" header and pass it as the timestampHeader parameter.
+ */
+class WebhooksHelper {
+    static verifySignature(requestBody, signatureHeader, publicKey, timestampHeader) {
+        return __awaiter(this, void 0, void 0, function* () {
+            if (requestBody == null || signatureHeader == null || publicKey == null) {
+                throw new Error("Missing required parameters for webhook signature verification");
+            }
+            if (timestampHeader == null || timestampHeader === "") {
+                throw new Error("Missing timestamp header 'X-Suward-Timestamp' for webhook signature verification");
+            }
+            const timestampValue = parseInt(timestampHeader, 10);
+            if (Number.isNaN(timestampValue)) {
+                throw new Error("Invalid timestamp format: expected unix milliseconds");
+            }
+            const timestampMs = timestampValue;
+            if (Math.abs(Date.now() - timestampMs) > TIMESTAMP_TOLERANCE_SECONDS * 1000) {
+                return false;
+            }
+            const sig = signatureHeader.startsWith(SIGNATURE_PREFIX)
+                ? signatureHeader.slice(SIGNATURE_PREFIX.length)
+                : signatureHeader;
+            const payload = requestBody;
+            return yield core.verifyAsymmetricSignature({
+                payload: payload,
+                signature: sig,
+                publicKey: publicKey,
+                algorithm: "ED25519",
+                encoding: "hex",
+            });
+        });
+    }
+}
+exports.WebhooksHelper = WebhooksHelper;

package/dist/cjs/webhooks/index.d.ts

@@ -0,0 +1 @@
+export { WebhooksHelper } from "./WebhooksHelper.js";

package/dist/cjs/webhooks/index.js

@@ -0,0 +1,5 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WebhooksHelper = void 0;
+var WebhooksHelper_js_1 = require("./WebhooksHelper.js");
+Object.defineProperty(exports, "WebhooksHelper", { enumerable: true, get: function () { return WebhooksHelper_js_1.WebhooksHelper; } });

package/dist/esm/BaseClient.d.mts

@@ -0,0 +1,42 @@
+import { HeaderAuthProvider } from "./auth/HeaderAuthProvider.mjs";
+import * as core from "./core/index.mjs";
+import type * as environments from "./environments.mjs";
+export type AuthOption = false | core.AuthProvider["getAuthRequest"] | core.AuthProvider | HeaderAuthProvider.AuthOptions;
+export type BaseClientOptions = {
+    environment?: core.Supplier<environments.SuwardSDKEnvironment | string>;
+    /** Specify a custom URL to connect the client to. */
+    baseUrl?: core.Supplier<string>;
+    /** Additional headers to include in requests. */
+    headers?: Record<string, string | core.Supplier<string | null | undefined> | null | undefined>;
+    /** The default maximum time to wait for a response in seconds. */
+    timeoutInSeconds?: number;
+    /** The default number of times to retry the request. Defaults to 2. */
+    maxRetries?: number;
+    /** Provide a custom fetch implementation. Useful for platforms that don't have a built-in fetch or need a custom implementation. */
+    fetch?: typeof fetch;
+    /** Configure logging for the client. */
+    logging?: core.logging.LogConfig | core.logging.Logger;
+    /** Override auth. Pass false to disable, a function returning auth headers, an AuthProvider, or auth options. */
+    auth?: AuthOption;
+} & HeaderAuthProvider.AuthOptions;
+export interface BaseRequestOptions {
+    /** The maximum time to wait for a response in seconds. */
+    timeoutInSeconds?: number;
+    /** The number of times to retry the request. Defaults to 2. */
+    maxRetries?: number;
+    /** A hook to abort the request. */
+    abortSignal?: AbortSignal;
+    /** Additional query string parameters to include in the request. */
+    queryParams?: Record<string, unknown>;
+    /** Additional headers to include in the request. */
+    headers?: Record<string, string | core.Supplier<string | null | undefined> | null | undefined>;
+}
+export type NormalizedClientOptions<T extends BaseClientOptions = BaseClientOptions> = T & {
+    logging: core.logging.Logger;
+    authProvider?: core.AuthProvider;
+};
+export type NormalizedClientOptionsWithAuth<T extends BaseClientOptions = BaseClientOptions> = NormalizedClientOptions<T> & {
+    authProvider: core.AuthProvider;
+};
+export declare function normalizeClientOptions<T extends BaseClientOptions = BaseClientOptions>(options: T): NormalizedClientOptions<T>;
+export declare function normalizeClientOptionsWithAuth<T extends BaseClientOptions = BaseClientOptions>(options: T): NormalizedClientOptionsWithAuth<T>;